Senior Consultant - GRC/AI/Privacy
About the job
- A bachelor's degree from an accredited university is required.
- A minimum of 10–15 years of experience in security consulting is required.
- A minimum of 10–15 years of experience in enterprise security is required.
- Strong expertise in assessing the maturity of IT security programs and capabilities, identifying current states, and establishing roadmaps to defined target states that address capability gaps and associated risks is required.
- Extensive knowledge of industry security and risk management frameworks and guidance, such as NIST CSF, ISO 27001, ISO 27005, and the NIST Risk Management Framework, and extensive experience implementing or assessing against them is required.
- Experience performing IT/IS risk, privacy, and control assessments based on leading practices and regulatory requirements, such as PCI, SOC 2, GDPR, and HIPAA, is required.
- Working knowledge of industry best practices and the regulatory and compliance landscape across common cybersecurity domains is required.
- Ability to work directly with customers and solve challenging problems is required.
- Excellent oral and written communication and presentation skills, including the ability to present security sessions and workshops to C-level executives and non-technical audiences, are required.
- Strong organizational, detail-management, and time-management skills, including the ability to prioritize effectively in a fast-paced, high-volume, evolving environment, are required.
- Ability to approach customer and sales requests proactively and consultatively, understand user needs, and deliver effectively is required.
- Ability to manage multiple changing priorities and meet deadlines in an entrepreneurial environment is required.
- Ability to travel when needed is required.
- Lead complex governance, risk, and compliance (GRC), security, privacy, risk, and artificial intelligence engagements.
- Facilitate client workshops, providing education and expertise to clients and executive stakeholders.
- Assess current-state capabilities across people, processes, and technology, and define practical target states, priorities, dependencies, and implementation roadmaps.
- Apply relevant frameworks and regulations, including NIST CSF, NIST RMF, NIST 800-53, ISO 27001, ISO 27005, SOC 2, PCI DSS, HIPAA, FFIEC, GLBA, SOX, GDPR, and CMMC, as appropriate to each client environment.
- Translate regulatory and security requirements into tailored control environments, governance models, policies, procedures, standards, guidelines, workflows, and measurable program objectives.
- Oversee deliverables, including assessment reports, gap analyses, maturity models, risk registers, control mappings, executive briefings, strategic roadmaps, project plans, and operating-model recommendations.
- Maintain trusted relationships with client sponsors, decision-makers, control owners, and partner teams.
- Advise organizations on governance, risk, security, privacy, and compliance implications of artificial intelligence, machine learning, generative AI, and agentic AI.
- Monitor and inform the practice and clients about applicable emerging AI laws, regulations, regulatory guidance, standards, and contractual requirements, including the EU AI Act, U.S. federal and state developments, GDPR-related obligations, and sector-specific requirements.
- Translate evolving AI requirements into practical policies, standards, controls, governance processes, evidence requirements, and implementation roadmaps.
- Help define, mature, package, and operationalize Trace3’s GRC service portfolio and delivery methodologies.
- Establish reusable approaches, templates, quality standards, and intellectual property to improve consistency, scalability, and client outcomes.
- Serve as a senior GRC thought leader in client meetings, internal enablement sessions, industry events, partner activities, and published content.
- Track GRC-adjacent technologies and build partnerships with solution and market leaders on control management, trust centers, third-party risk management, risk management, privacy operations, and AI governance.
- CISSP, CISA, CISM, CIPP, or an equivalent security or privacy certification is strongly desired.
- Advanced PowerPoint presentation skills are strongly desired.
About the company
Trace3 is a technology consulting and integration partner that helps enterprises manage and optimize IT infrastructure. It focuses on IT security, hybrid cloud strategy, and product release planning, offering professional integration services such as staging, imaging, asset tagging, and global logistics to streamline asset monitoring and inventory control. The company earns revenue from service-based engagements, including managing complex data center projects, staged rollouts, and secure inventory management in Tier 1 facilities. Its team also shares knowledge through a weblog covering cloud computing, cybersecurity, and data management. Overall, Trace3 aims to help businesses navigate IT challenges and improve productivity and competitive advantage by fine-tuning technology infrastructure and asset management.
Company Size
1,001-5,000
Company Stage
Acquired
Total Funding
N/A
Headquarters
Irvine, California
Founded
2002
Get referred to Trace3
See people who can refer or advise you
Simplify's Take
What believers are saying
- Trace3 completed Calian's U.S. commercial IT asset purchase on October 1, 2026.
- Trace3 launched an Anthropic partnership on August 6, 2026, accelerating enterprise Claude deployments.
- Trace3's May 20, 2026 Cisco-NVIDIA AI Factory positions it for AI infrastructure demand.
What critics are saying
- Trace3 must integrate Calian's Texas and Minnesota teams after October 1, 2026.
- Cisco, NVIDIA, and Anthropic partnerships deepen platform reliance and vendor leverage.
- Hyperscalers and AI specialists commoditize consulting margins by 2027, squeezing Trace3's services-first model.
What makes Trace3 unique
- Trace3 completed Apollo acquisition in November 2025, preserving founder-style execution speed.
- Trace3 blends consulting, integration, and managed services across cloud, data, security, AI.
- Trace3 earned Cisco Preferred status across six portfolios on February 12, 2026.
Help us improve and share your feedback! Did you find this helpful?
Benefits
Health Insurance
Dental Insurance
Vision Insurance
Life Insurance
Disability Insurance
Health Savings Account/Flexible Spending Account
401(k) Retirement Plan
401(k) Company Match
Competitive Compensation
Training and development programs
Work-life balance and generous paid time off
Collaborative and cool culture
Stocked kitchen with snacks and beverages
Growth & Insights and Company News
6 month growth
0%1 year growth
0%2 year growth
6%Ascerta raises USD $18 million in Series A funding. Thu, 1st Oct 2026 (Today) Ascerta has raised USD $18 million in a Series A funding round led by Dell Technologies Capital and changed its name from Pay-i. The funding brings the Bellevue-based company's total capital raised to USD $22.9 million. Ascerta sells software designed to help large organisations track the cost, use and business returns of artificial intelligence tools. Many companies can measure technical activity such as token consumption, agent runs and AI-generated code, but still struggle to judge whether those projects are delivering commercial value. The new funding will support the expansion of Ascerta's Enterprise AI Management platform, which is designed to give Chief Information Officers, Chief Financial Officers and other AI leaders a single view of spending, adoption and outcomes across an organisation. Investors in the round included Hitachi Ventures, BGV, Wipro Ventures and earlier backers. The company was founded in 2024 by former Microsoft executives David Tepper, Doron Holan and Erik Winters. Ascerta emerged from stealth in 2025 under the Pay-i name after raising a USD $4.9 million seed round focused on AI cost management. The rebrand reflects a broader pitch to customers as companies move from pilot projects to wider AI deployment. From Cost To Value Ascerta argues that enterprises now need more than conventional FinOps tools, which are generally used to monitor and control technology spending. As AI use spreads across copilots, coding assistants, internal applications and model infrastructure, executives want to know not just what these systems cost, but whether they improve productivity, reduce waste or create measurable business gains. Its platform connects with existing enterprise AI systems and software tools, including internally built applications and products such as Microsoft Copilot, Amazon Bedrock AgentCore, Salesforce Agentforce, GitHub Copilot, Claude Code and Codex. Ascerta says it tracks AI activity from individual users and teams through to specific business outcomes, while also measuring less visible costs such as sub-token charges, hidden fees and contract discounts. The company groups its software into three products. Atlas focuses on measuring AI value, adoption and return on investment across workflows and portfolios. Forge is aimed at engineering teams using coding agents. Convoy is designed for organisations that run their own AI capacity and want to increase use without disrupting existing operations. Ascerta said customers using its platform have, on average, improved return on investment on AI initiatives by 47%, reduced launch times by 24% and cut wasted AI spending by 86%. Those figures were not independently verified. Customer Base Ascerta says it works with customers including Atos, Wipro and global insurance carriers, and with partners including Microsoft, AWS, IBM, Slalom and Trace3. Atos is using the software as it seeks to move agentic AI projects from pilot stages into production across its operations. "The market is full of meaningless vanity metrics," said David Tepper, Chief Executive Officer and Co-Founder of Ascerta. "Companies are counting tokens, lines of generated code and agent runs, struggling to derive the impact AI has on their business. We built Ascerta to cut through the noise and give organizations the means to win in the AI era. That means insights specific to their business, people and use cases. That means purpose-built tools to prevent waste and aggressively optimize for value. Ascerta is a guide through one of the most pivotal eras of transformation in history." The leadership team draws heavily on Microsoft experience. Tepper spent 19 years at the software group and worked on internal generative AI strategy for Azure, while Holan spent 27 years there and worked on infrastructure for large-scale request handling. Ascerta's pitch comes as investors and corporate buyers scrutinise the economics of AI projects more closely. After an initial rush into experimentation, many large organisations are deciding which deployments to expand and which to abandon. That shift has created an opening for vendors promising clearer links between AI spending and business performance. In Ascerta's case, that means tracking use by person, team and use case, then tying those patterns to the key performance indicators each project was meant to influence. Atos said that approach has helped it gain more oversight as it expands the use of AI agents. "At Atos, our Sovereign Agentic Studios operating model is built on moving agentic AI from pilot to production at global scale," said Florin Rotar, Group Chief Technology Officer and Chief AI Officer at Atos. "That requires measurable business value, not just technical capability. Ascerta has been instrumental in delivering on that promise, giving us the visibility and control we need to scale AI initiatives with confidence." Dell Technologies Capital said Ascerta is responding to a growing need among enterprises to assess AI projects on business terms rather than technical output alone. "Ascerta is building the system of record for AI value creation," said Raman Khanna, Managing Director at Dell Technologies Capital. "Most enterprises are moving beyond broad AI experimentation and focusing their investments on what delivers measurable business value. David and the Ascerta team are giving leaders the visibility and rigor they need to understand what's working, optimize spending and scale their most successful AI initiatives. We're excited to partner with Ascerta as they define the Enterprise AI Management category."
Trace3 plans to acquire Calian Group's US commercial IT operations, expanding its managed services capabilities and national presence. The carve-out transaction will add operational capacity in Texas and Minnesota, including a security operations centre and two 24x7x365 network operations centres. The acquisition strengthens Trace3's ability to deliver integrated solutions across AI, cloud, data, and security. Both companies share a consultative, client-centric approach focused on engineering expertise and long-term value delivery. "This planned acquisition meaningfully expands our managed services capabilities and operational reach in the US," said Joe Quaglia, Trace3 CEO. The transaction also extends complementary strengths in cloud, data centre, cybersecurity, and strategic partnerships, including Cisco alliances. The deal is expected to close next month.
Calian announces agreement to sell its U.S. commercial IT business to Trace3. OTTAWA, Ontario, Aug. 26, 2026 (GLOBE NEWSWIRE) - Calian Group Ltd. ("the Company") (TSX: CGY), a mission-critical solutions company focused on defence, space, healthcare and other critical infrastructure sectors, today announced it has entered into a definitive agreement to sell its United States (U.S.) commercial IT business based in Houston, Texas, to Trace3, a leading technology solutions provider and digital transformation consultancy headquartered in Irvine, California. The agreement provides upfront cash proceeds of approximately CAD $43 million (US $31 million) and the assumption of certain net liabilities totalling approximately CAD $17 million (US $12 million) by the purchaser. The transaction is expected to close in the Company's fourth fiscal quarter, subject to various consents and other customary closing conditions. Strategic rationale The divestiture reflects Calian's deliberate portfolio strategy to concentrate resources and its capabilities on high-growth, high-margin opportunities in defence, space and essential industries, including healthcare and nuclear, in Canada, the U.S., the United Kingdom and Europe. The proceeds will be directed toward organic growth initiatives and Calian's mergers and acquisition pipeline in its core verticals. Including cash flows generated during ownership and proceeds from the sale, Calian generated a mid-teen IRR over its five years of ownership. "This transaction allows our organization to sharpen our strategic focus and redeploy capital toward markets where Calian has the strongest competitive position and the greatest long-term opportunity," said Patrick Houston, President and CEO of Calian. "Since acquiring the U.S. commercial IT business, Calian has expanded its U.S. footprint and built a stronger platform for growth. As our strategy has evolved, we believe this business is now best positioned with Trace3, where it can continue to develop and succeed as part of a company deeply focused on enterprise technology solutions. This is the right next step for both organizations, and we wish the team continued success." About Calian For over 40 years, Calian has delivered mission-critical solutions when failure is not an option. Trusted worldwide, we empower organizations in critical industries to overcome obstacles, manage risks and drive progress. By combining the expertise of our people, proven industry insight, cutting-edge technology, bold innovation, and global reach, we deliver tailored solutions that solve complex challenges. Headquartered in Ottawa, Canada, with over 6,000 people around the world, Calian's solutions protect lives, strengthen security, foster global connectivity and drive economic progress, making a lasting impact where and when it matters most. Product or service names mentioned herein may be the trademarks of their respective owners. About Trace3 Trace3 delivers business transformation. The firm consults on, integrates, and operates convergent solutions across data, security, and cloud that embrace emerging technology and drive measurable business value for its clients. Media Contact: Jill Simpson, APR Phone: (269) 930-0912 Email: [email protected] __________________________________________ DISCLAIMER Certain information included in this press release is forward-looking and is subject to important risks and uncertainties. The results or events predicted in these statements may differ materially from actual results or events. Such statements are generally accompanied by words such as "intend", "anticipate", "believe", "estimate", "expect" or similar statements. Factors which could cause results or events to differ from current expectations include, among other things: the impact of price competition; scarce number of qualified professionals; the impact of rapid technological and market change; loss of business or credit risk with major customers; technical risks on fixed price projects; general industry and market conditions and growth rates; international growth and global economic conditions, and including currency exchange rate fluctuations; and the impact of consolidations in the business services industry. For additional information with respect to certain of these and other factors, please see the Company's most recent annual report and other reports filed by Calian with the Ontario Securities Commission. Calian disclaims any intention or obligation to update or revise any forward-looking statements, whether as a result of new information, future events or otherwise. No assurance can be given that actual results, performance or achievement expressed in, or implied by, forward-looking statements within this disclosure will occur, or if they do, that any benefits may be derived from them. Calian · Head Office · 770 Palladium Drive · Ottawa · Ontario · Canada · K2V 1C8 Tel: 613.599.8600 · Fax: 613-592-3664 · General info email: [email protected]
Microsoft Ignite 2025 recap: what you missed. Microsoft Ignite returned this year with even more attendees than the previous year, and ProsperOps was right in the middle of it all. From November 18 - 21, the Moscone Convention Center in downtown San Francisco transformed into a buzzing hub of innovation. For ProsperOps, Ignite was jam-packed with events and fruitful FinOps conversations. With organizations doubling down on cloud efficiency, its team had the opportunity to connect with customers, prospects, and FinOps leaders from different industries. This year also marked an exciting milestone for ProsperOps. Following the GA of Autonomous Discount Management for Azure in September, ProsperOps, Inc. broadened its support to include Azure SQL, MySQL, and PostgreSQL just in time for Ignite, establishing ProsperOps as a multi-cloud, multi-service FinOps automation platform. This expansion proved compelling to organizations seeking an intelligent cloud savings solution. Starting strong with the FinOps Community Happy Hour. Before Ignite officially kicked off, ProsperOps, Inc. joined forces with Trace3 to host a lively FinOps Community Happy Hour at Tropisueño. Attendees enjoyed delicious appetizers, tacos, and drinks, fueling energetic discussions about real-world FinOps challenges and successes. Customers and prospects brought thoughtful perspectives from their own FinOps journeys, and the room quickly filled with shared ideas. It was the perfect warm-up before the conference marathon began. Cloud Savings and magic at Booth #6051. Once the expo doors opened, Booth #6051 stayed buzzing from morning to evening. Attendees stopped by to grab its detailed solution briefs, chat with its team, and watch the platform demo looping on the big screen. John Born, its mentalist and master of mind-bending illusions, drew crowds all week with his Rubik's Cube wizardry. (To date, no one has figured out how he does it. ProsperOps, Inc. has tried! Repeatedly.) His snake eyes trick consistently left people surprised. And of course, no ProsperOps booth is complete without its beloved swag: the famous ProsperOps socks, celebrated for their unmatched softness, and the ProsperOps plushie, a fan favorite among attendees (and service dogs). There really was something for everyone. Azure cost optimization lightning talk with Joe Benincasa. On day one of the conference, its Director of Product Management, Joe Benincasa, took the Expo Hall stage for a lightning talk on Azure cost optimization. A large crowd gathered to hear him unpack how organizations can maximize savings using Azure Reservations and Savings Plans for Compute and how ProsperOps takes the heavy lifting out of managing them. Joe walked through real-world examples, practical strategies, Effective Savings Rate benchmarking outcomes, and automation opportunities, giving attendees actionable insights. An intimate evening for FinOps leaders. Midweek, ProsperOps, Inc. shifted from expo-floor energy to an evening of more intimate conversations at Mastro's Steakhouse. Partnering with Kyndryl and CloudZero, ProsperOps, Inc. hosted FinOps practitioners for a private dinner focused on deeper discussions about cloud cost optimization. Downstairs, live music added warmth to the atmosphere, and the evening ended with Mastro's iconic warm butter cake, an ideal ending to a chilly west coast night in San Francisco. Key Announcements at Microsoft Ignite 2025. Ignite's main theme this year centered on the following. AI shift from "assistant" to "autonomous agent" Microsoft framed this as the shift to the Agentic Enterprise, where organizations move from using AI tools to deploying AI agents capable of independent decision-making, execution, and collaboration across systems. Here are the Top 6 Announcements from Microsoft Ignite 2025: 1. Expanded collaboration between Microsoft and Nvidia. This partnership brings integration between Microsoft Copilot and next-generation Azure VMs powered by Nvidia's GPUs. With this infrastructure, companies will be able to seamlessly develop, deploy, and manage AI-enabled applications. 2. Microsoft Agent 365: A control plane for enterprise AI agents. Microsoft unveiled Agent 365, a centralized platform for managing AI agents with identity, governance, and permissions supported by Entra ID, Purview, and Defender. This helps enterprises scale AI safely. 3. The IQ Stack: smarter, context-aware agents. Microsoft introduced the IQ Stack, which gives agents organizational awareness, allowing them to reason over internal data, workflows, roles, and interactions for more sophisticated task execution. 4. New domain-specific agents across the business. Specialized agents were launched for Sales, HR, Workforce Insights, and Learning. These aren't just assistants; they are fully operational digital workers designed to take on substantial, multi-step responsibilities. 5. Upgrades to Microsoft 365 Copilot & cross-app workflow automation. Copilot became more deeply integrated across Microsoft 365, enabling natural-language-driven workflows across apps like Word, Excel, and PowerPoint, allowing users to collaborate with both Copilot and agents. 6. Security, governance & cloud infrastructure for the agentic future. Microsoft emphasized secure-by-default agent deployment, plus new cloud-PC capabilities optimized for running autonomous AI workloads. Team dinner and wrap-up. As the conference wound down, ProsperOps, Inc. wrapped up conversations with prospects, customers, and fellow cloud cost optimization enthusiasts. Before everyone made their way back home, the ProsperOps team gathered for a final celebratory Italian dinner and reflected on the week. Thank you San Francisco and Microsoft. ProsperOps, Inc. will be coming back next year! In the meanwhile, see how ProsperOps can help reduce Azure costs without impacting engineering resources by booking a free Cloud Savings analysis. ProsperOps, Inc. will also be launching the Rate Optimization Insights Report for Azure in early 2026. This will be one of a series of upcoming Effective Savings Rate benchmarking reports.
Apollo Global has announced that its affiliates will acquire Trace3 from American Securities, which will retain a significant minority equity interest. The financial terms of the deal were not disclosed. The transaction is pending customary closing conditions and regulatory approvals.